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SECURE PROXIMITY VERIFICATION OF A NODE ON A NETWORK 

This invention relates to the field of communications security, and in particular, to a 
system and method that verifies the proximity of a node on a network. 

Network security can often be enhanced by distinguishing between 'local' nodes and 
'remote' nodes on the network. In like manner, different rights or restrictions may be 
imposed on the distribution of material to nodes, based on whether the node is local or 
remote. Local nodes, for example, are typically located within a particular physical 
environment, and it can be assumed that users within this physical environment are 
authorized to access the network and/or authorized to receive files from other local nodes 
Remote nodes, on the other hand, are susceptible to unauthorized physical access 
Additionally, unauthorized intruders on a network typically access the network remotely 
via telephone or other communication channels. Because of the susceptibility of the 
network to unauthorized access via remote nodes, network security and/or copyprotection 
can be enhanced by imposing stringent security measures and/or access restrictions on 
remote nodes, while not encumbering local nodes with these same restrictions. 

It is an object of this invention to provide a system and method that facilitates a 
determination of whether a node on a network is local or remote. It is a further object of 
this invenuon to integrate this determination with a system or method that verifies the 
20 authenticity of the node on the network. 

These objects and others are achieved by a system and method that facilitates a 
determination of communication time between a source node and a target node within a 
node-verification protocol, such as the Open Copyprotection System (OCPS). The 
proximity of the target node to the source node is determined from the communication 
delay associated with a challenge-response protocol. The node-verification protocol 
includes a query-response sequence, wherein the source node communicates a query to the 
target node, and the target node communicates a corresponding response to the source 
node. To distinguish between the actual communication time and the time required to 
generate the response corresponding to the query, the target node is configured to 
communicate two responses to the query: a first response that is transmitted immediately 
upon receipt of the query, and a second response based on the contents of the query The 
communication time is determined based on the time duration between the transmission of 
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the query and receipt of the first response at the source node. The second response is 
compared for correspondence to thequery,to verify the authenticity of the target node, and 
the communication time is compared to a threshold value to determine whether the target 
node is local or remote relative to the source node. 
FIG. 1 illustrates an example block diagram of a network of nodes 

FIG. 2 illustrates an example block diagram of a source and target node that effect a query- 
response protocol in accordance with this invention. 

Throughout the drawings, the same reference numeral refers to the same element, or an 
element that performs substantially the same function. 

FIG. 1 illustrates an example block diagram of a network 150 of nodes 1 10 One of 
the nodes, NodeD 1 10, is illustrated as being distant from the other nodes 110 In 
accordance with this invention, each of the nodes 110 is configured to be able to determine 
the proxunity of each other node 1 10. In a typical embodiment of this invention the 
proximity determination is limited to a determination of whether the other node is "local" 
or remote", although a more detailed determination of distances can be effected using the 
techniques disclosed herein. 
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0T that effect a query-response protocol to determine the proximity of the target node 

1 10T to the source node 1 10S in accordance with this invention. The source node HQS 

includes a processor 2 10 that initiates a query, and a communications device 220 that 

^tsmequerytometargetnodellOT.lnetargetnodellOTreceivesthequeryand 
returns a corresponding response, via its communications device 230. To assure that the 
first response corresponds to the communicated query, the protocol calls for the target node 
HOT to process at least a portion of the query and to include a result of this processing in 
15 the second response, via a processor 240. 

The source node 1 10S is configured to measure the time consumed by the query- 
response process, and from this measure, to determine the proximity of the target node 
3 TOT. In a conventional query-response protocol, the query-response time includes the 
tune to communicate the query and response, as well as the time to process the query and 
generate the response at the target node 1 1 0T, and thus the query-response time in a 
conventional query-response protocol is generally unsuitable for determining the 
communication time. 
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In accordance with this invention, the target node 1 10T is configured to provide 
two responses to the query. The target node HOT provides an immediate response upon 
receipt of the query, and then a subsequent response after processing the query. The source 
node 1 10S is configured to measure the time duration between the transmission of the 
query and the receipt of the first response from the target node 1 10T to determine the 
relative proximity of the target node 1 10T to the source node 1 10S. The source node is also 
configured to verify the authenticity of the target node 1 10T based on the second response 
from the target node 1 10T. In a preferred embodiment, the authenticity of the first response 
is also verifiable as originating from the target node 1 10T, either via the contents of the 
first response or the second response. 

Using known techniques, the distance between the source 1 10S and target 1 10T can 
be calculated using the determined communication time between the transmission of the 
query from the source 1 10S and the receipt of the first response from the target 1 10T. As 
noted above, in a typical embodiment, the communication time is used to determine 
whether the target 1 10T is local or remote from the source 1 10S. This determination is 
made in a preferred embodiment of this invention by comparing the communication time to 
a nominal threshold value, typically not more than a few milliseconds. If the 
communication time is below the threshold, the target 1 10T is determined to be local; 
otherwise, it is determined to be remote. Multiple thresholds may also be applied, to 
provide for a relative measure of the degree of remoteness of the target HOT from the 
source 11 OS. 

In a typical embodiment, the source 1 10S uses the remote/local proximity 
determination to control subsequent communications with the target HOT, and/or to 
control access of the target node to system resources, such as data and processes, based on 
the proximity. For example, some files may be permitted to be transferred only to local 
nodes, all communications with a remote node may be required to be encrypted, some files 
may be prohibited from inter-continental transmissions, and so on. 

In a preferred embodiment of this invention, the above query-response process is 
integrated within a node-authentication process, such as a key-exchange process, which 
typically includes one or more query-response sequences. 

The OCPS protocol, for example, includes an authentication stage, a key exchange 
stage, a key generation phase, and subsequent data transmission phases. The key exchange 
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phase is effected via a modified Needham-Schroeder key exchange protocol, as described 
in "Handbook of Applied Cryptography", Menezes et al. 

At the authentication stage, each of the source 1 1 OS and target HOT nodes 
authenticates a public key of each other using the corresponding digital certificates. 

At the start of the key exchange phase, the source 1 1 OS generates a message 
composed of a random number and a random key. The source 1 10S then encrypts the 
message, using the public key of the target 1 10T, and transmits the encrypted message to 
the target 1 10T as the aforementioned query. In accordance with this invention, the source 
node 1 10S initiates a timer when these encryptions are transmitted to the target 1 10T. 

Jh the conventional OCPS protocol, the target HOT decrypts the random number 
and random key from the source 1 10S, using the private key of the target 1 10T. The target 
1 10T generates a message composed of a new random number, a new random key, and the 
decrypted random number from the source 1 10S, and encrypts the message , using the 
public key of the source 110S, to form a response that is to be communicated to the source 
1 10S. The target 1 10T also signs the response, using the target's private key. 

In accordance with this invention, upon receipt of the query, Ihe target HOT 
communicates a first response to the source 1 10S, before the aforementioned decryption of 
the random number and random key. In one preferred embodiment of this invention, the 
target HOT communicates a new random number to the source 1 1 OS as the first response, 
and subsequently authenticates this new random number via an addendum to the 
conventional OCPS response that is transmitted as the second response. In another 
preferred embodiment, the target HOT includes a portion of the conventional OCPS 
response in the first response containing an encrypted and signed new random number, 
followed by the remainder of the conventional OCPS response. 

In the first preferred embodiment, the second response includes the random number 
of the first response within the material that is encrypted using the public key of the source 
1 10S, and signed using the private key of the target HOT. 

In the second preferred embodiment, the first response includes the new random 
number, encrypted using the public key of the source 1 10S, and signed using the private 
key of the target 1 10T. The encryption and signature of the new random number is effected 
immediately after the authentication phase, so that this encrypted and signed response is 
available for transmission from the target HOT to the source 1 10S immediately upon 
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receipt of the query from the source 1 10S. After sending the first response, the target 1 10T 
decrypts the query from the source 1 10S, using the private key of the target HOT, and 
generates a new message composed of a new random key and the decrypted random key. 
The target then encrypts the new message using the public key of the source 110S, signs 
5 the message using its private key, and transmits the enrypted and signed response 

contained in the query back to the source 1 10S, thereby verifying the identity of the target 
1 10T to the source 1 10S. 

When the source node 1 10S receives the first response, it terminates the 
aforementioned timer, thereby establishing a measure of the round-trip communication 
10 time between source 1 10S and target 1 10T. Upon receipt of the second response, the 

source node 1 10S verifies the signed message, using the public key of the target 1 10T, and 
decrypts the random numbers and random key from the response, using the private key of 
the source 110S. 

To confirm the key exchange, the source 11 OS transmits the decrypted new random 
15 number back to the target HOT. Both the source 1 10S and target 1 10T control subsequent 
communications based upon receipt of the proper decrypted random numbers. In 
accordance with this invention, the source 1 10S also controls subsequent communications 
based upon the determined communication time. 

If both nodes are verified, subsequent communications between the source 1 10S 
20 and target 1 1 OT encrypt the communications using a session key that is a combination of 
the random keys, the public keys, and a session index. 

The foregoing merely illustrates the principles of the invention. It will thus be 
appreciated that those skilled in the art will be able to devise various arrangements which, 
although not explicitly described or shown herein, embody the principles of the invention 
25 and are thus within the spirit and scope of the following claims. 
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CLAIMS: 

1. A method of determining proximity of a target node to a source node, comprising: 
communicating a query from the source node to the target node, 
communicating a first response from the target node to the source node, 

immediately after the query is received at the target node, 
receiving the first response at the source node, 

processing the query at the target node to produce therefrom a second response that 

facilitates a verification of the target node and its first response, 

communicating the second response from the target node to the source node, 
determining a measure of communication time between communicating the query 

and receiving the first response, and 

determining the proximity of the target node based on the measure of 
communication time. 



2. The method of claim 1, wherein 

the query and at least one of the first and second responses correspond to at least 
portion of a cryptographic key-exchange protocol. 

3. The method of claim 2, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

4. The method of claim 1, wherein 

the query and at least one of the first and second responses correspond to at least i 
portion of an OCPS protocol. 

5. The method of claim 1, wherein 

the query includes an encryption of an item based on a public key of the target 
node, and 

the processing of the query includes decrypting the item based on a private key of 
the target node, for inclusion in the second response. 
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6. The method of claim 5, wherein 

the first response includes a random number, and 

the processing of the query further includes encrypting the item and the random 
number using a public key of the source node to form at least aportion of the second 
response. 

7. The method of claim 5, wherein 
of the source node. 

8. The method of claim 1, wherein 

determining the proximity includes comparing the communication time to a 
threshold value that distinguishes between local and remote nodes. 

9. The method of claim 1, further including 

restricting communications with the target node based on the proximity. 

10. The method of claim 1, further including 

restricting access of the target node to system resources based on the proximity. 

1 1 . A node on a network including; 

a conjunction device that is configured to receive a query from a source node 
and to transmit a first response that facilitates proximity verification of the node to the 
source node upon receipt of the query, and a second response that facilitates a verification 
of the node to the source node, and 

a processor that is configured to process the query and produce therefrom the 
second response. 

12. The node of claim 1 1, wherein 

the processor is configured to process the query and produce the response as part of 
a cryptographic key-exchange protocol. 
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13. The node of claim 12, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 



14. The node of claim 11, wherein 
the query and at least one o 
portion of an OCPS protocol initiated by the source node 



the query and at least one of the first and second responses correspond to at least a 



15. The node of claim 11, wherein 

the query includes an encryption of an item based on a public key of the node, and 
the processor is configured to decrypt the item based on a private key of the node, 
for inclusion in the second response. 

16. The node of claim 15, wherein 

the first response includes a random number, and 

the processor is configured to encrypt the item and the random number using a 
public key of the source node to form at least a portion of the second response. 

17. The node of claim 15, wherein 

the first response includes an encryption of a random number based on a public key 
of the source node. 

1 8. A node on a network including: 

a communication device that is configured to transmit a query to a target node and 
to receive a first response and a second response from the target node, 
a processor that is configured to: 

measure a communication time between transmitting the query and 
receiving the first response, 

determine a proximity of the target node relative to the node based on the 
communication time, and 

verify the target node based on the second response. 
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19. The node of claim 18, wherein 

the processor is configured to generate the query and process at least one of the first 
and second responses as part of a cryptographic key-exchange protocol. 

20. The node of claim 19, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 



21 . The node of claim 18, wherein 

the query and at least one of the first and second responses correspond to at least 
portion of an OCPS protocol initiated by the node. 

22. The node of claim 18, wherein 

the query includes an encryption of an item based on a public key of the target 



the second response includes a decryption of the item based on a private key of the 
target node. 

23. The node of claim 22, wherein 

the first response includes a random number, and 

the second response includes an encryption of the decryption of the item and the 
random number, using a public key of the node. 

24. The node of claim 23, wherein 

the second response further includes a signature of the decryption of the item and 
the random number, using a private key of the target node. 

25. The node of claim 22, wherein 

the first response includes an encryption of a random number based on a public key 
of the node. 



protocol. 



node, and 
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26. The node of claim 18, wherein 

the processor is configured to determine the proximity based on a comparison of 
the communication time to a threshold value that distinguishes between local and remote 
nodes. 



27. The node of claim 1 8, wherein 

the processor is further configured to control subsequent communications with the 
target node based on the proximity. 

28. The node of claim 18, wherein 

the processor is further configured to control access of the target node to system 
resources based on the proximity. 
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